Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/WfkPGKTMfgJbIwqVTdPI2_wEHpg.roa
File: WfkPGKTMfgJbIwqVTdPI2_wEHpg.roa (raw, json)
Hash identifier: 61wMpPMsu/powU8dTvW/CT9EinIgRt4Ib+Rcwj1hMMk=
Subject key identifier: 59:F9:0F:18:A4:CC:7E:02:5B:23:0A:95:4D:D3:C8:DB:FC:04:1E:98
Certificate issuer: /CN=64347465bc925c8e756ddfaa609eda02cc52d031
Certificate serial: 018C54232CE25616800DBA267D56EDBAF9AF
Authority key identifier: 64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/WfkPGKTMfgJbIwqVTdPI2_wEHpg.roa
Signing time: Sun 10 Dec 2023 14:30:40 +0000
ROA not before: Sun 10 Dec 2023 14:30:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216398
IP address blocks: 85.114.96.0/24 maxlen: 24
185.97.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:54:23:2c:e2:56:16:80:0d:ba:26:7d:56:ed:ba:f9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64347465bc925c8e756ddfaa609eda02cc52d031
Validity
Not Before: Dec 10 14:30:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59f90f18a4cc7e025b230a954dd3c8dbfc041e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:3c:13:bb:8c:2d:20:5b:6f:db:3d:d2:6b:
b8:11:48:41:52:36:53:52:a8:1b:e8:60:fd:2c:f7:
36:62:e2:03:d3:a8:7f:48:4f:d1:1a:7b:ba:19:ad:
1e:d7:3b:28:89:53:4e:3f:b1:fd:04:f0:12:30:e0:
50:ef:4d:e2:8d:f9:b8:de:24:ea:5a:b8:7d:6f:41:
51:22:7e:36:f2:3b:17:14:aa:48:43:66:2b:5b:18:
95:33:27:06:95:da:88:53:7e:6d:6a:c1:6d:63:0e:
18:ba:16:14:3a:68:4c:5b:67:80:c3:1b:a7:9a:9e:
9a:2d:9d:e5:b1:f6:e3:c6:3b:5f:48:47:b1:7e:f2:
bb:4d:8d:7b:74:32:07:73:d3:2c:33:b4:d2:55:b3:
60:ad:9e:b8:ef:0f:bb:30:ba:0a:d4:f8:01:12:7a:
16:1b:93:22:7e:61:7c:67:73:7a:ef:fd:9e:4e:b7:
ff:8b:92:23:93:d4:0a:e7:42:c9:78:1b:cd:8f:77:
b2:68:d9:66:69:c9:10:00:91:6d:c6:24:82:55:55:
f9:0c:cf:48:2e:4e:0c:da:77:1d:63:1e:d3:59:df:
d7:76:3e:4c:cf:30:23:d7:ab:f0:bd:73:be:a5:81:
97:5d:4f:87:d2:55:07:84:77:1b:11:01:93:7b:3e:
5b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F9:0F:18:A4:CC:7E:02:5B:23:0A:95:4D:D3:C8:DB:FC:04:1E:98
X509v3 Authority Key Identifier:
keyid:64:34:74:65:BC:92:5C:8E:75:6D:DF:AA:60:9E:DA:02:CC:52:D0:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/WfkPGKTMfgJbIwqVTdPI2_wEHpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b1ff7b-b766-47c7-be0d-c0a7b7377eab/1/ZDR0ZbySXI51bd-qYJ7aAsxS0DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.114.96.0/24
185.97.66.0/23
Signature Algorithm: sha256WithRSAEncryption
dc:e0:5b:8e:2e:28:db:49:fc:3b:25:af:f8:ea:0c:aa:2c:2c:
91:c0:22:a0:13:9e:a1:89:91:61:2a:bf:f7:e3:8e:1a:df:76:
2a:02:26:c9:25:5e:c2:01:9a:24:45:ea:bb:8e:ba:33:21:6e:
bc:13:12:c4:21:be:5b:6b:f5:33:58:2b:2e:4d:48:5b:82:05:
5d:af:e8:be:4a:33:da:48:77:15:ef:1f:04:32:a4:38:cf:a6:
33:37:2b:39:2d:eb:a4:4d:e6:59:40:9c:65:9d:89:83:c3:a7:
ae:20:c5:75:01:35:e7:f2:1c:29:ed:64:4f:db:40:c2:13:2c:
d5:c3:ee:d6:d9:c7:58:24:eb:c4:53:0b:95:f3:a6:b6:2f:1c:
09:0d:b8:4c:30:e2:c7:09:d5:c8:1a:d1:b4:fe:0b:5d:78:2b:
f5:f3:c7:86:ad:0e:87:08:a3:49:69:06:20:c9:32:c2:2d:4f:
ec:f1:50:10:fa:9d:9a:3f:fa:83:6a:bf:96:f0:78:49:40:76:
67:4f:a8:7f:c4:d7:e0:8f:93:0a:ae:fe:6f:c2:68:07:2a:0a:
78:62:51:e1:21:88:b3:fc:b8:ad:1b:96:82:d7:e3:50:bd:a3:
1d:83:08:49:33:a5:e8:8f:9b:c4:a0:6b:ec:6b:61:80:ff:e4:
88:49:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:02 2024 by rpki-client on console-ams.rpki-client.org